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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application; 

Listing of Claims: 

1 . (Currently amended) A method for facilitating integrity of an assembly 
employable by application programs during runtime, comprising th e steps of : 

providing an assembly with a manifest that contains a list of modules that make 
up the assembly; aad 

providing the manifest with a hash of the contents of at least one module of the 
list of modules ; and 

comparing the hash retained in the manifest with a hash of the at least one module 
obtained at runtime to identify whether a runtime version of the at least one module is 
substantially similar to a version utilized at build time of the assembly . 

2. (Currently amended) The method of claim l s th e st e p of providing the manifest 
with a hash of the contents of at least one module of the list of modules comprises 
comprising th e st e p of p roviding the manifest with abash of each module of the list of 
modules that constitutes the assembly. 

3 . (Currently amended) The method of claim 1 s further comprising the step of 
providing identity information in the manifest of the assembly. 

4. (Original) The method of claim 3, the identity information comprising publisher 
information and version information. 

5. (Currently amended) The method of claim 1, further comprising fe e -st ep of 
providing a hash of the contents of the assembly at the end of the assembly. 
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6. (Currently amended) The method of claim 1, further comprising the stop of 
determining if the contents of the assembly have been modified by determining an actual 
hash of the contents of the at least one module of the list of modules and comparing the 
actual hash with the hash of the contents of the at least one module of the list of modules 
residing in the manifest of the assembly. 



7. (Currently amended) The method of claim 6, further comprising the atop of 
determining if the publisher of the assembly is trustworthy if the assembly has been 
modified. 

8. (Currently amended) The method of claim 7, tho stop of -determining if the 
publisher of the assembly is trustworthy if the assembly has been modified comprising 
the otop of checking version information and publisher name information residing in the 
manifest of the assembly. 



9. (Currently amended) The method of claim 1, further comprising tho atop-ef 
providing the manifest with a hash of a manifest of at least one other assembly that the 
assembly depends on. 

10. (Currently amended) A method for facilitating integrity of assemblies employable 
by application programs during runtime, comprising tho stops of : 

providing an assembly with a manifest that contains a list of referenced 
assemblies that the assembly depends on; a?*d 

providing the manifest with a hash of a manifest of at least one referenced 
assembly of the list of referenced assemblie s: and 

analyzing the hash provided to the manifest and a second hash of the manifest of 
the at least one referenced assembly computed at runtime to determine whether chan ges 
have been made to the at least one referenced assembly between runtime and at build 
time of the assembly . 
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1 1 . (Currently amended) The method of claim 10, fee step ef providing the manifest 
with a hash of a manifest of at least one referenced assembly of the list of referenced 
assemblies comprises comprising tho stopaof providing the manifest with a hash of each 
referenced assembly of the list of referenced assemblies. 

12. (Currently amended) The method of claim 10, further comprising the step of 
providing identity information in the manifest of the assembly. 

13. (Original) The method of claim 12, the identity information comprising publisher 
information and version information. 

1 4. (Currently amended) The method of claim 1 0, further comprising the step of 
providing a hash of the contents of the assembly at the end of the assembly. 

1 5 . (Currently amended) The method of claim 1 0, further comprising fee step of 
determining if the contents of the at least one referenced assembly have been modified by 
determining an actual hash of the contents of the at least one referenced assembly of the 
list of referenced assemblies and comparing the actual hash with the hash of the contents 
of the at least one referenced assembly of the list of referenced assemblies residing in the 
manifest of the assembly. 

16. (Currently amended) The method of claim 15, further comprising the stop of 
determining if the publisher of the at least one referenced assembly is trustworthy if the at 
least one referenced assembly has been modified. 

17. (Currently amended) The method of claim 16, tho stop of determining if the 
publisher of the at least one referenced assembly is trustworthy if the at least one 
referenced assembly has been modified comprises comprising tho step of checking 
version information and publisher name information residing in a manifest of the at least 
one referenced assembly. 
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1 8. (Currently amended) A computer readable medium having at least one computer 
executable component employable by an application program at runtime comprising: 

[[;]] 

an assembly including a manifest that contains a list of modules that make up the 
assembly and a hash of the contents of at least one module of the list of module s, the hash 
is utilized to control which versions of the modi,? ft S are emnloveri in connection with ih* 
assembly at runtime. 



1 9. (Original) The computer readable medium of claim 1 8, the manifest including a 
list of at least one referenced assembly and a hash of a manifest of the at least one 
referenced assembly. 



20. (Original) The computer readable medium of claim 1 9, the manifest including 
identity information and version information. 



21. (Original) The computer readable medium of claim 19, the assembly being 
dynamically linked library. 



22. (Currently amended) A computer readable medium having at least one computer 
executable component employable by an application program at runtime comprising: 
an assembly including a manifest that contains a list of at least one referenced 
assembly that the assembly references and a hash of the contents of a manifest of the at 
least one referenced assembly, the hash is compa red to a mctmtl hash produced a t 

runtime to evaluate whether t he at least one referenced assembly is a same version as the 
at least one referenced ass embly utilized at build time of the assembly . 
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23. (Cinrently amended) A system for facilitating integrity of assemblies employable 
by application programs at runtime, the system comprising: 

a first component that provides n di ptcd to provid e a manifest for an assembly, the 
manifest having a list of modules making up the assembly, and 

a second component thai provides nriq ptodto pumd o the manifest with a hash of 
at least one module of the list of module s, the hash is comp art w h a hash nf fhff M Wt 
one module generate at runtime to identify cb^ in th, COnten , nf at w , ^ 
module. 



24. (Previously presented) The system of claim 23, further comprising a third 
component adapted to compare the hash of said at least one module with an actual hash 
value of the at least one module. 



version 



25. (Original) The system of claim 24, the manifest including identity and 
mfonnation and the third component adapted to determine if the assembly should be 
executed based on a review of the originator and version information, if the hash of the at 
least one module in the manifest and the actual hash value of the at least one module are 
different. 



26. (Original) The system of claim 23, further comprising a binding component 
adapted to provide binding policy information for deteirniniog a version of an assembly 
that an application program will run if another assembly having the same name resides on 
the system. 
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27. (Currently amended) A system for facilitating integrity of assemblies employable 
by application programs at runtime, the system comprising: 

a first component feat provides adopted to provide a manifest for an assembly, the 

* 

manifest having at least one referenced assembly, the at least one referenced assembly 
comprising a manifest; asd 

a second component that provides adapted to provide the manifest with a hash of 
the manifest of the at least one referenced assembl y; and 

a third component that compares the hash of the at least one referenced assembly 
in the manifest with an actual hash value of the at least one referenced assembly to 
identify version changes . 

28. (Cancelled). 

29. (Original) The system of claim 27, further comprising a binding component 
adapted to provide the third component with binding policy information. 

30. (Currently amended) A system for facilitating integrity of an assembly 
employable by application programs at runtime, the system comprising: 

means for relating a manifest having a list of at least one related assembly to an 
assembly, the at least one related assembly comprising a manifest; aad 

means for providing the manifest with a hash of the manifest of the at least one 
related assembly; and 

means for evaluating integrity of the assembly by comparing the hash value with 
a second hash value computed at runtime . 

3 L (Original) The system of claim 30, the at least one related assembly being a 
module. 

32. (Original) The system of claim 30, the at least one related assembly being a 
referenced assembly. 
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33. (Original) The system of claim 30, further comprising means for comparing a 
hash value of the at least one related assembly in the manifest to an actual hash value of 
the at least one related assembly. 



34. (Original) The system of claim 30, further comprising means for establishing a 
binding policy. 



35. (Original) The system of claim 30, at least one of the assembly and the at least 
one related assembly being a dynamically linked library. 
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